netsec-assignment2-S4498062/exercise3/exercise3e


1
2
3
4
5
6
7
8
9
10

In the Conversations > TCP view, we see many very short (few packets) 
conversations between 192.168.84.56 (several ports) and 192.168.86.10:21057. I
would guess then that .56 is being rejected by .10.
Using the filter

    ip.addr==192.168.84.56 and ip.addr==192.168.84.10

this is confirmed. We see many TCP packets from .56 with SYN, but .10
continuously repeats with RST, ACK.